Page MenuHomeVyOS Platform
Feed All Stories

All Stories
Use Results
Edit Query

Sep 16 2022

n.fort changed the status of T4700: Firewall - Add interface match criteria from Open to In progress.
Sep 16 2022, 10:40 AM · VyOS 1.4 Sagitta
n.fort created T4700: Firewall - Add interface match criteria.
Sep 16 2022, 10:40 AM · VyOS 1.4 Sagitta
n.fort changed the status of T4699: Firewall - Add jump action - Add return action from Open to In progress.
Sep 16 2022, 10:36 AM · VyOS 1.4 Sagitta
n.fort created T4699: Firewall - Add jump action - Add return action.
Sep 16 2022, 10:35 AM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX1b3ded9fb284: policy-route: T4697: Add missing rule_id for verify_rule func.
Sep 16 2022, 9:36 AM
GitHub <noreply@github.com> committed rVYOSONEX79a96ee24176: Merge pull request #1544 from sever-sever/T4697 (authored by c-po).
Sep 16 2022, 9:36 AM
Viacheslav changed the status of T3896: Extend ocserv support to allow for per-group configs from Open to Needs testing.
Sep 16 2022, 8:06 AM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX734a779523b8: ocserv: T4656: use "0.0.0.0" defaultValue via XML definition".
Sep 16 2022, 7:51 AM
c-po changed the status of T4656: Support the listen-host config field of openconnect server from In progress to Needs testing.
Sep 16 2022, 7:33 AM · VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEXecb2a4077f90: ocserv: openconnect: T4656: add listen-address CLI option (authored by Demon_H).
Sep 16 2022, 7:24 AM
Viacheslav added a project to T4697: policy route: Generating ConfigError failes when tcp flag is missing on set tcp-mss rule commit: VyOS 1.4 Sagitta.

PR https://github.com/vyos/vyos-1x/pull/1544

Sep 16 2022, 7:22 AM · VyOS 1.4 Sagitta
c-po closed T4698: Drop validator name="range" and replace it with numeric, a subtask of T4669: Extend numeric.ml for inversion of values and range values, as Resolved.
Sep 16 2022, 7:16 AM · VyOS 1.4 Sagitta
c-po closed T4698: Drop validator name="range" and replace it with numeric as Resolved.
Sep 16 2022, 7:16 AM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX28573ffe4fd9: xml: T4698: drop validator name="range" and replace it with numeric.
Sep 16 2022, 7:16 AM
Viacheslav changed the status of T4697: policy route: Generating ConfigError failes when tcp flag is missing on set tcp-mss rule commit from Open to In progress.
Sep 16 2022, 7:03 AM · VyOS 1.4 Sagitta
Viacheslav closed T4695: Add 'es' and 'jp106' keymap option keyboard-layout as Resolved.
Sep 16 2022, 6:47 AM · VyOS 1.4 Sagitta
c-po edited a custom field on T4698: Drop validator name="range" and replace it with numeric.
Sep 16 2022, 6:37 AM · VyOS 1.4 Sagitta
c-po closed T4669: Extend numeric.ml for inversion of values and range values as Resolved.
Sep 16 2022, 6:37 AM · VyOS 1.4 Sagitta
c-po triaged T4698: Drop validator name="range" and replace it with numeric as Normal priority.
Sep 16 2022, 6:37 AM · VyOS 1.4 Sagitta
Viacheslav closed T4687: Canot change configuration after image update from 202207220217 to 202209090217 as Invalid.
Sep 16 2022, 6:18 AM · VyOS 1.4 Sagitta
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

Added a new pull request to make ISIS segment routing work again.

Sep 16 2022, 4:09 AM · VyOS 1.4 Sagitta

Sep 15 2022

vishvas added a comment to T1973: Allow route-map to match on BGP local preference value.

Dear Sir
Will it work with 1.4 ?
BR
Vishvas

Sep 15 2022, 9:49 PM · VyOS 1.3 Equuleus (1.3.0), VyOS 1.2 Crux (VyOS 1.2.6), vyatta-cfg-quagga
Sophie added a comment to T160: Support NAT64.

Jool is still being maintained for bugfixes etc. and it has all the features we're looking for, then it sounds fairly ideal. If no new features are being added to it, it's less likely to break in future releases too

Sep 15 2022, 9:15 PM · VyOS 1.4 Sagitta (1.4.0-epa1)
runar created T4697: policy route: Generating ConfigError failes when tcp flag is missing on set tcp-mss rule commit.
Sep 15 2022, 7:39 PM · VyOS 1.4 Sagitta
syncer moved T4695: Add 'es' and 'jp106' keymap option keyboard-layout from Open to In Progress on the VyOS 1.4 Sagitta board.
Sep 15 2022, 6:55 PM · VyOS 1.4 Sagitta
syncer triaged T4695: Add 'es' and 'jp106' keymap option keyboard-layout as Normal priority.
Sep 15 2022, 6:55 PM · VyOS 1.4 Sagitta
syncer triaged T3424: PPPoE IA-PD doesn't work in VRF as Normal priority.
Sep 15 2022, 6:53 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
jack9603301 updated subscribers of T4689: Support RFS(Receive Flow Steering).

I re-reviewed this PR and the following commit from @c-po

Sep 15 2022, 6:45 PM · VyOS 1.4 Sagitta
xPakrikx added a comment to T4687: Canot change configuration after image update from 202207220217 to 202209090217.

Ok now its working. Thanks. My bad.

Sep 15 2022, 4:51 PM · VyOS 1.4 Sagitta
c-po closed T4630: Prevent attempts to use the same interface as a source interface for pseudo-ethernet and MACsec at the same time as Resolved.
Sep 15 2022, 4:01 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
sempervictus committed rVYOSONEXa87ada1c4e9d: T3896: Drop cserv local user req, add groupconfig.
Sep 15 2022, 2:28 PM
sempervictus committed rVYOSONEX0b3bfe97b617: T3896: Use group selector and forced dns tunneling.
Sep 15 2022, 2:28 PM
sempervictus committed rVYOSONEX4a5e4cfd6c11: T3896: update groupconfig syntax per PR1463.
Sep 15 2022, 2:28 PM
sempervictus committed rVYOSONEXe5785ff748f9: T3896: update group syntax per PR1463.
Sep 15 2022, 2:28 PM
GitHub <noreply@github.com> committed rVYOSONEX7a2ad35ec8ec: Merge pull request #1477 from sempervictus/feature/ocserv_groups (authored by Viacheslav).
Sep 15 2022, 2:28 PM
c-po committed rVYOSONEX87894a2fa329: T4630: can not use same source-interface for macsec and pseudo-ethernet.
Sep 15 2022, 2:22 PM
GitHub <noreply@github.com> committed rVYOSONEX435016fdb353: Merge pull request #1519 from c-po/t4630-equuleus-peth-macsec (authored by dmbaturin).
Sep 15 2022, 2:22 PM
Viacheslav moved T4679: OpenVPN site-to-site incorrect check for IPv6 local and remote address from Need Triage to Finished on the VyOS 1.3 Equuleus (1.3.3) board.
Sep 15 2022, 2:08 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav closed T4679: OpenVPN site-to-site incorrect check for IPv6 local and remote address as Resolved.
Sep 15 2022, 2:08 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
Viacheslav committed rVYOSONEX3629f376c26b: openvpn: T4679: Fix incorrect verify local and remote address.
Sep 15 2022, 2:07 PM
GitHub <noreply@github.com> committed rVYOSONEXe57146723fd7: Merge pull request #1539 from sever-sever/T4679-eq (authored by dmbaturin).
Sep 15 2022, 2:07 PM
v.huti added a comment to T4180: Support for QoS Policy Propagation via BGP (QPPB).

Changes on the FRR side:

  • Convert xdp helper library to an optional plugin + bgp hook
  • Minor fixes + cleanups
  • Figured out most of the permission problems

Changes on the XDP side:

  • Convert mappings from legacy iproute format to the latest libbpf one
  • New mappings improve debugging experience by implementing pretty-printing for XDP map dumping
  • Added an xdp-loader for xdp-tools repo
Sep 15 2022, 1:57 PM · VyOS Rolling
jack9603301 committed rVYOSONEXac4e07f96ae3: rfs: T4689: Support RFS(Receive Flow Steering).
Sep 15 2022, 12:33 PM
c-po closed T4696: Extend bgp parameters for bgp bestpath peer-type multipath-relax as Resolved.
Sep 15 2022, 12:33 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEXd41909874a6a: bgp: T4696: add support for "bestpath peer-type multipath-relax".
Sep 15 2022, 12:33 PM
c-po committed rVYOSONEX3e24e673537c: smoketest: ethernet: rfs: T4689: also test default "0" case.
Sep 15 2022, 12:33 PM
c-po committed rVYOSONEXe976ee9ed5d1: ethernet: rfs: T4689: remove redundant code.
Sep 15 2022, 12:33 PM
c-po committed rVYOSONEX87ee858f1483: Merge branch 'T4689' of https://github.com/jack9603301/vyos-1x into current.
Sep 15 2022, 12:33 PM
c-po changed the status of T4696: Extend bgp parameters for bgp bestpath peer-type multipath-relax from Open to In progress.
Sep 15 2022, 12:14 PM · VyOS 1.4 Sagitta
c-po closed T4691: Upgrade Linux Kernel to latest 5.15.y train as Resolved.
Sep 15 2022, 12:13 PM · VyOS 1.4 Sagitta
c-po committed rVYOSONEX31602e18386e: smoketest: nhrp: T2199: fix nftables rule/chain names.
Sep 15 2022, 11:26 AM
dmbaturin deleted 1.3.2.
Sep 15 2022, 10:43 AM · VyOS 1.3 Equuleus
dmbaturin created 1.3.2.
Sep 15 2022, 10:42 AM · VyOS 1.3 Equuleus (1.3.2)
aalmenar created T4696: Extend bgp parameters for bgp bestpath peer-type multipath-relax.
Sep 15 2022, 9:52 AM · VyOS 1.4 Sagitta
jack9603301 added a comment to T4689: Support RFS(Receive Flow Steering).

https://github.com/vyos/vyos-1x/pull/1535

Sep 15 2022, 9:44 AM · VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEX9a38b823b8c9: conntrack: T4691: lower "tcp max-retrans" upper limit (authored by c-po).
Sep 15 2022, 6:47 AM
GitHub <noreply@github.com> committed rVYOSONEX9562dd1081ad: smoketest: conntrack: T4691: lower test value for nf_conntrack_tcp_max_retrans (authored by c-po).
Sep 15 2022, 6:41 AM
Unknown Object (User) added a comment to T874: Support for Two Factor Authentication for CLI access via Google Authenticator/OTP.

PR adding libpam-google-authenticator package to VyOS:
https://github.com/vyos/vyos-1x/pull/1541

Sep 15 2022, 5:57 AM · VyOS 1.4 Sagitta (1.4.0-epa1)
GitHub <noreply@github.com> committed rVYOSONEX75c659d96ed3: Create codeql.yml (authored by syncer).
Sep 15 2022, 5:48 AM
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

It seems that we have two constraints here.

Sep 15 2022, 4:35 AM · VyOS 1.4 Sagitta
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

Made a fix and now we have:

Sep 15 2022, 4:32 AM · VyOS 1.4 Sagitta
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

Let me see if I can fix it.

Sep 15 2022, 4:06 AM · VyOS 1.4 Sagitta
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

Doing further testing, it seems adding the explicit-null broke the configuration:

Sep 15 2022, 3:59 AM · VyOS 1.4 Sagitta
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

Good news. It seems the patch worked properly. Here we show MPLS labels generated via segment routing for the prefix command:

Sep 15 2022, 3:57 AM · VyOS 1.4 Sagitta

Sep 14 2022

Viacheslav changed the status of T4680: Telegraf prometheus-client listen-address invalid format from Open to In progress.
Sep 14 2022, 7:31 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.4 Sagitta
Viacheslav changed the status of T4685: Interface does not exist on boot when used as inbound-interface for local policy route from Open to Needs testing.
Sep 14 2022, 7:28 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4695: Add 'es' and 'jp106' keymap option keyboard-layout from In progress to Needs testing.
Sep 14 2022, 7:21 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4687: Canot change configuration after image update from 202207220217 to 202209090217.

As I mentioned above, use it before the configuration, it described in the doc

#!/bin/vbash
Sep 14 2022, 7:17 PM · VyOS 1.4 Sagitta
Viacheslav committed rVYOSONEX5e159042dc05: keymap: T4695: Add Spain 'es' and Japan 'jp106' keymaps.
Sep 14 2022, 7:13 PM
GitHub <noreply@github.com> committed rVYOSONEX3ed4341db4b3: Merge pull request #1540 from sever-sever/T4695 (authored by c-po).
Sep 14 2022, 7:13 PM
Viacheslav changed the status of T4693: ISIS segment routing was broken... from Open to Needs testing.
Sep 14 2022, 7:12 PM · VyOS 1.4 Sagitta
n.fort added a comment to T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.

Interesting article on how and when to match ipsec options: https://thermalcircle.de/doku.php?id=blog:linux:nftables_demystifying_ipsec_expressions

Sep 14 2022, 6:18 PM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav added a comment to T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.

There is PR https://github.com/vyos/vyos-1x/pull/1516 for T4667 but it brakes all GRE traffic

Sep 14 2022, 6:04 PM · VyOS 1.4 Sagitta (1.4.0-GA)
Viacheslav added a comment to T4695: Add 'es' and 'jp106' keymap option keyboard-layout.

PR https://github.com/vyos/vyos-1x/pull/1540

Sep 14 2022, 5:51 PM · VyOS 1.4 Sagitta
Viacheslav changed the status of T4695: Add 'es' and 'jp106' keymap option keyboard-layout from Open to In progress.
Sep 14 2022, 5:29 PM · VyOS 1.4 Sagitta
Viacheslav renamed T4695: Add 'es' and 'jp106' keymap option keyboard-layout from Add 'es' and 'jp106' keymap to Add 'es' and 'jp106' keymap option keyboard-layout.
Sep 14 2022, 5:28 PM · VyOS 1.4 Sagitta
Viacheslav created T4695: Add 'es' and 'jp106' keymap option keyboard-layout.
Sep 14 2022, 5:28 PM · VyOS 1.4 Sagitta
Viacheslav added a comment to T4679: OpenVPN site-to-site incorrect check for IPv6 local and remote address.

PR for 1.3 https://github.com/vyos/vyos-1x/pull/1539

Sep 14 2022, 3:17 PM · VyOS 1.4 Sagitta, VyOS 1.3 Equuleus (1.3.3)
lferrarotti added a comment to T3424: PPPoE IA-PD doesn't work in VRF.

Hi all,

Sep 14 2022, 3:09 PM · VyOS 1.3 Equuleus (1.3.4), VyOS 1.4 Sagitta
GitHub <noreply@github.com> committed rVYOSONEXf379df09d839: Merge pull request #1530 from sever-sever/T4679 (authored by c-po).
Sep 14 2022, 2:34 PM
Viacheslav committed rVYOSONEXf7bab4058d86: openvpn: T4679: Fix incorrect verify local and remote address.
Sep 14 2022, 2:34 PM
sarthurdev committed rVYOSONEX8e8c3bb1cf21: firewall: nat66: policy: T2199: Fix smoketests for nftables updated output.
Sep 14 2022, 2:33 PM
GitHub <noreply@github.com> committed rVYOSONEX2309f4075831: Merge pull request #1538 from sarthurdev/nftables1_tests (authored by c-po).
Sep 14 2022, 2:33 PM
n.fort added a comment to T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.

Do you have a proposed cli format?

Sep 14 2022, 2:22 PM · VyOS 1.4 Sagitta (1.4.0-GA)
jmarmorato created T4694: Allow VyOS Firewall to Match Outbound IPSec Traffic.
Sep 14 2022, 1:40 PM · VyOS 1.4 Sagitta (1.4.0-GA)
sarthurdev committed rVYOSONEX31cd47594aa5: nhrp: T2199: Use separate table in nftables for NHRP rules.
Sep 14 2022, 11:24 AM
GitHub <noreply@github.com> committed rVYOSONEX5c21529c812b: Merge pull request #1537 from sarthurdev/nhrp_nftables (authored by c-po).
Sep 14 2022, 11:24 AM
sarthurdev committed rVYOSONEX450ca9a9b46d: firewall: T2199: Refactor firewall + zone-policy, move interfaces under….
Sep 14 2022, 5:56 AM
sarthurdev committed rVYOSONEX31587975258a: firewall: T2199: Move initial firewall tables to data.
Sep 14 2022, 5:56 AM
sarthurdev committed rVYOSONEXf38da6ba4d82: firewall: T4605: Rename filter tables to vyos_filter.
Sep 14 2022, 5:56 AM
sarthurdev committed rVYOSONEX24e5529be7b5: policy: T2199: Typo in policy route smoketest teardown.
Sep 14 2022, 5:56 AM
sarthurdev committed rVYOSONEX30945f39d6d1: zone-policy: T2199: Migrate zone-policy to firewall node.
Sep 14 2022, 5:56 AM
GitHub <noreply@github.com> committed rVYOSONEXe5c9f290b70c: Merge pull request #1534 from sarthurdev/firewall_interfaces (authored by c-po).
Sep 14 2022, 5:56 AM
GitHub <noreply@github.com> committed rVYOSONEX24fc5a832dbd: Merge pull request #1536 from Cheeze-It/current (authored by c-po).
Sep 14 2022, 5:05 AM
Cheeze_It committed rVYOSONEXbc3cfe6e3397: isis: T4693: Fix ISIS segment routing configurations.
Sep 14 2022, 5:05 AM
nickomarsa updated nickomarsa.
Sep 14 2022, 4:31 AM
Cheeze_It added a comment to T4693: ISIS segment routing was broken....

Added a pull request for this fix.

Sep 14 2022, 2:48 AM · VyOS 1.4 Sagitta
xPakrikx added a comment to T4687: Canot change configuration after image update from 202207220217 to 202209090217.

Nope, i use CLI for configuration and script for vrrp (wireguard interface enable/disable)

Sep 14 2022, 12:45 AM · VyOS 1.4 Sagitta

Sep 13 2022

Cheeze_It created T4693: ISIS segment routing was broken....
Sep 13 2022, 11:52 PM · VyOS 1.4 Sagitta
c-po added a comment to T2913: Failure to install fpm while building builder docker image.

Fix for 1.3 https://github.com/vyos/vyos-build/pull/261

Sep 13 2022, 7:47 PM · VyOS 1.3 Equuleus (1.3.3), VyOS 1.2 Crux (VyOS 1.2.8)
First
Prev
Next